This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
How can I add a user to a specific group in Active Directory for 35 days and then remove the user from the group using PowerShell?
Hi @Zring Abdulrazzaq Rasool ,
to add and remove users to and from on-premises Active Directory you can use these cmdlets in your script:
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten
Hi Andreas, thanks for your reply, I found below script and it works, thanks again
$User = "username" # Replace with the username you want to add
$Group = "groupname" # Replace with the group name
$Days = 35
Add-LocalGroupMember -Group $Group -Member $User
Write-Output "$User has been added to $Group for $Days days."
$action = {
Remove-LocalGroupMember -Group $using:Group -Member $using:User
Write-Output "$using:User has been removed from $using:Group after $using:Days days."
}
$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddDays($Days)
$Principal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -LogonType ServiceAccount -RunLevel Highest
$Settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable
Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-Command $($action.ToString())") -Trigger $Trigger -Principal $Principal -Settings $Settings -TaskName "RemoveUserFromGroup" -Description "Remove user $User from $Group after $Days days"